| Exploits | OS | Link |
|---|---|---|
| CVE-2017-7269 | Windows | here |
| Kernel 2.2.4 PrivEsc (ptrace kmod) | Linux | here |
| Kernel 2.6.37 full nelson | Linux | here |
| MS08-067 Python Reverse Shell | Windows | here |
| MS10-015 KiTrap0D | Windows | here |
| MS11-046 afd privesc | Windows | here |
| MS13-053 NTUserMessageCall | Windows | here |
| MS14-058 HttpFileServer 2.3 RCE (CVE-2014-6287) | Windows | here |
| MS15-051 ClientCopyImage | Windows | here |
| MS16-032 drivers eop | Windows | here |
| MS16-135 win23k | Windows | here |
| MS17-010 eternalblue | Windows | here |
| Mod SSL 2.8.7 OpenSSL Exploit (openfuckV2.c) | Linux | here |
Onetwopunch - wrapper for unicorn and nmap scan
source: https://raw.githubusercontent.com/superkojiman/onetwopunch/master/onetwopunch.sh
Scan for port using nicornscan (very fast) and chain it with nmap vuln nse script scan
-
ping sweep for online hosts into list
nmap -v -sn 10.11.1-254 -oG all-hosts.txtgrep Up all-hosts.txt > online.hosts.txt -
download onetwopunch script
wget https://raw.githubusercontent.com/superkojiman/onetwopunch/master/onetwopunch.sh -
run script with nmap -sV option
./scripts/onetwopunch.sh -t online-hosts.txt -p all -i tap0 -n -sV -
Once complete, navigate to output folder "ndir". Use command to formats all .xml output to html
for x in $(ls *.xml); do filename=$(echo $x | sed 's/xml/html/') && xsltproc $x -o $filename; donewget https://raw.githubusercontent.com/superkojiman/onetwopunch/master/onetwopunch.sh./scripts/onetwopunch.sh -t online-hosts.txt -p all -i tap0 -n -sV -
Navigate to output folder "ndir" and formats all .xml output to html
for x in $(ls *.xml); do filename=$(echo $x | sed 's/xml/html/') && xsltproc $x -o $filename; done
Droopescan - drupal scanner
source: https://github.com/droope/droopescan
git clone https://github.com/droope/droopescan.git
cd droopescan
pip install -r requirements.txt
droopescan scan drupal -u https://10.11.1.49
Samba Checker - checks for samba version
Checks Samba version as enum4linux messed up? THanks fellow student OS-40285/rewardone
./samba_checker.sh <ipaddress> <port>